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CLAIMS 

1. A method of operating a computing device, the method 
comprising allocating a handle to a process for enabling the 
process to use a resource allocated to another process, arranging 
the handle such that the process is not able to identify the 
resource, and inhibiting further access by the process to the 
resource after the use of the resource by the process arising from 
the allocation of the handle has been terminated. 

2. A method according to claim 1 wherein the handle is arranged to 
enable a plurality of resources allocated to the said another 
process to be used by the process. 

3. A method according to claim 1 or 2 wherein the handle is 
arranged to enable a plurality of processes other than the said 
another process to use the resource allocated to the said another 
process. 

4. A method according to any one of the preceding claims wherein 
the resource is selected to comprise at least one of computing 
device memory, a semaphore, a mutex, a chunk, a message 
queue, a thread, a file, or a device channel. 

5. A method according to claim 4 wherein, when the resource 
comprises a file, the file comprises at least one of a trusted font 
file or a message attachment file for the said another process. 

6. A method according to claim 4 or 5 wherein the resource is 
located in a data cage within the said another process. 
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7. A method according to any one of the preceding claims wherein 
the process is selected to comprise a file server. 

8. A method according to claim 7 wherein the file server is arranged 
to indicate to a kernel of the operating system for the computing 
device that it is able to support the use of the resource prior to the 
allocation of the handle to the server. 

9. A method according to claim 7 or 8 wherein the said other process 
is arranged to terminate a communication session with the server 
upon allocation of the file handle to the server. 

10. A method according to claim 1 wherein the said another process 
comprises a parent process, the process comprises a child 
process, and the resource comprises a kernel resource for an 
operating system for the computing device. 

11. A method according to any one of the preceding claims wherein 
the handle is provided as an anonymous instantiation of a server 
required to access the resource. 

12. A computing device arranged to operate in accordance with a 
method as claimed in any one of claims 1 to 1 1 . 

13. A computing device according to claim 12 comprising a wireless 
communication device. 

14. Computer software for causing a computing device to operate in 
accordance with a method as claimed in any one of claims 1 to 
11. 



